Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/6ec345391e55dfd132d0d43b293c138aa42f45a4.roa
File:                     6ec345391e55dfd132d0d43b293c138aa42f45a4.roa (raw, json)
Hash identifier:          3iJjTgI3OMjystPES8kjZVOmoD3F1p7xyd95ueLaKh4=
Subject key identifier:   81:6E:08:D1:BD:A9:2B:A8:A3:2A:EF:2F:72:B9:D3:92:0F:08:5D:A4
Certificate issuer:       /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial:       1EA480
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/6ec345391e55dfd132d0d43b293c138aa42f45a4.roa
Signing time:             Sat 27 May 2023 20:06:09 +0000
ROA not before:           Fri 26 May 2023 20:06:08 +0000
ROA not after:            Tue 27 May 2025 20:06:08 +0000
asID:                     27951
IP address blocks:        45.189.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008192 (0x1ea480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
        Validity
            Not Before: May 26 20:06:08 2023 GMT
            Not After : May 27 20:06:08 2025 GMT
        Subject: CN=6ec345391e55dfd132d0d43b293c138aa42f45a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:a6:00:1b:f1:3d:13:10:e6:67:86:97:a4:
                    ee:84:12:ab:59:63:94:ba:f7:dd:a4:6a:4c:79:75:
                    fb:e9:c3:8b:53:22:ba:72:d8:8c:10:76:24:1e:a1:
                    be:31:1c:fb:37:ef:2c:1c:3c:c3:77:6e:a0:e2:f8:
                    39:57:38:68:6f:d4:45:78:28:78:fd:13:30:99:7f:
                    d6:9b:20:4b:bf:a9:76:e6:d6:8f:b5:af:a7:a9:7e:
                    fe:e5:a8:76:a1:7d:ad:16:bd:a1:76:0d:9d:bb:9a:
                    34:1d:bf:13:db:59:56:62:f7:0b:09:2b:e1:e6:d3:
                    f9:f8:fb:a9:bc:37:ad:3a:e6:2c:87:5f:67:e6:ba:
                    62:4b:21:77:81:23:5d:82:97:d4:8d:e7:8f:ac:2b:
                    56:c1:f6:b9:3c:7e:a1:3c:58:10:82:e5:57:d8:53:
                    41:99:36:ae:11:f3:75:cd:01:ca:cc:c8:3a:db:0d:
                    cf:74:b0:d9:d7:c2:cb:65:1c:9d:01:18:6c:e2:13:
                    eb:d7:8a:6d:cb:2d:7c:0a:86:5b:25:c9:e3:cf:ae:
                    ea:b5:82:95:5e:4e:0a:98:2b:4a:15:d9:84:c1:60:
                    5e:f0:be:c3:2e:64:00:23:ec:2c:31:c7:b6:90:fe:
                    0a:66:de:a7:d9:1f:2e:b7:1a:9f:56:65:6a:1a:00:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6E:08:D1:BD:A9:2B:A8:A3:2A:EF:2F:72:B9:D3:92:0F:08:5D:A4
            X509v3 Authority Key Identifier:
                keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/6ec345391e55dfd132d0d43b293c138aa42f45a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ba:45:c8:b7:34:c1:bd:12:eb:fc:60:83:c6:c5:f3:d0:f8:
         1e:d0:e0:4a:fe:e0:49:56:a6:ac:9a:d3:7c:06:b7:13:fc:8f:
         d4:28:5b:a7:81:bf:f9:82:7c:a1:2f:d0:05:42:00:34:fa:38:
         d1:5b:6b:90:f4:c1:81:9b:1f:56:86:57:1e:7d:4f:c2:4e:b7:
         bf:76:43:0d:9e:97:ef:61:3e:b7:9e:b8:05:bc:ac:1a:50:82:
         e7:c7:a9:44:f8:30:88:7d:e0:63:0c:3a:20:c1:d6:0a:9b:10:
         82:2e:68:11:4b:ff:70:e5:81:15:af:bb:1e:b0:b8:ae:71:24:
         fd:e2:4e:c5:09:76:14:b9:24:5b:e1:28:10:19:ca:2d:e2:8c:
         03:ca:34:ed:77:9b:9e:85:77:2c:f2:a2:df:3b:43:74:f8:d1:
         df:9f:21:ff:6f:6c:af:59:fe:23:71:11:3c:5d:20:53:e5:86:
         66:20:59:01:4e:6d:8a:e2:a8:84:60:4e:c8:30:3c:34:4a:f2:
         70:7c:d8:ef:09:bb:ed:e1:e9:ba:27:e2:01:34:ed:64:e1:8f:
         fc:ca:a8:e2:18:3c:d2:94:4c:e3:a1:9b:f3:7a:56:d3:ce:35:
         23:38:ca:da:14:0b:18:7c:00:03:5e:29:73:a9:d9:35:b1:e0:
         a1:6b:cc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org